diff --git a/root.tf b/root.tf
index 11457f8..e29d1bf 100644
--- a/root.tf
+++ b/root.tf
@@ -60,7 +60,7 @@ data "vault_policy_document" "root" {
       # }
 
       dynamic "allowed_parameter" {
-        for_each = rule.value.allowed_parameter != null ? rule.value.allowed_parameter : {}
+        for_each = try(rule.value.allowed_parameter, {}) != {} ? rule.value.allowed_parameter : {}
         content {
           key   = allowed_parameter.key
           value = allowed_parameter.value
@@ -68,7 +68,7 @@ data "vault_policy_document" "root" {
       }
 
       dynamic "denied_parameter" {
-        for_each = rule.value.denied_parameter != null ? rule.value.denied_parameter : {}
+        for_each = try(rule.value.denied_parameter, {}) != {} ? rule.value.denied_parameter : {}
         content {
           key   = denied_parameter.key
           value = denied_parameter.value